<%@page import="java.net.URLEncoder"%>
<%@page import="java.net.URLDecoder"%>
<%@page import="java.sql.ResultSet"%>
<%@page contentType="text/html" pageEncoding="UTF-8"%>
<jsp:useBean id="database" scope="request" class="accessibleworldsdatabase.AccessibleWorldsDatabaseJavaBeans"/>
<jsp:useBean id="des" scope="request" class="accessibleworldsdes.AccessibleWorldsDESJavaBeans"/>
<%try {

String accessCode = request.getParameter("accessCode");

if(!(accessCode==null || "".equals(accessCode))) {
	
    accessCode = des.decryptString(session.getId(), accessCode);
    accessCode = URLDecoder.decode(accessCode, "UTF-8");
    
    if(des.getAndroidAccessCode().equals(accessCode) || des.getComputerAccessCode().equals(accessCode)) {
    	
    	String commentID = request.getParameter("commentID");
    	String comment = request.getParameter("comment");
    	
    	if(!(commentID == null || "".equalsIgnoreCase(commentID) ||
    			comment == null || "".equalsIgnoreCase(comment))) {
    		
    		commentID = des.decryptString(session.getId(), commentID);
    		comment = des.decryptString(session.getId(), comment);
    		
    		commentID = URLDecoder.decode(commentID, "UTF-8");
    		comment = URLDecoder.decode(comment, "UTF-8");
    		
    		database.connect(des.decryptString(des.getServiceSecretKey(), database.getEncryptedPassword()));
    	
    		String SQL =
	        "UPDATE Comments"+
    			" SET"+
	        		" description = \""+comment+"\""+
    			" WHERE"+
	        		" Comment_Id = "+commentID;
    		        
	        database.updateSQL(SQL);

		    String output = URLEncoder.encode("OK","UTF-8");
		    
	        output = des.encryptString(session.getId(),output);
	        out.print(output);
	        
		    database.closeConnection();
    	}
    }
}
} catch (Exception ex) {}%>